Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/01809b-42dd-4136-96b1-1fd10d8e075f/1/Q8d7RzY2gTePrORmFB1UzIg5nPU.mft
File: Q8d7RzY2gTePrORmFB1UzIg5nPU.mft (raw, json)
Hash identifier: beggNZe5bZSjgH0Nm9qlWqSOvZnp1jZwfjnUUBIMv58=
Subject key identifier: EB:89:95:91:8A:FB:38:F2:1F:D2:08:67:BA:FD:0D:82:59:FC:82:02
Authority key identifier: 43:C7:7B:47:36:36:81:37:8F:AC:E4:66:14:1D:54:CC:88:39:9C:F5
Certificate issuer: /CN=43c77b47363681378face466141d54cc88399cf5
Certificate serial: 019EC06D19755E34F666E98D10F3BF970AA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q8d7RzY2gTePrORmFB1UzIg5nPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/01809b-42dd-4136-96b1-1fd10d8e075f/1/Q8d7RzY2gTePrORmFB1UzIg5nPU.mft
Manifest number: 18EC
Signing time: Sat 13 Jun 2026 10:00:35 +0000
Manifest this update: Sat 13 Jun 2026 10:00:35 +0000
Manifest next update: Sun 14 Jun 2026 10:00:35 +0000
Files and hashes: 1: 1XdNFJlYALUGMKogiIBRKN_MGo4.roa (hash: E2oHH/KY2uFlsQZera9X/UCkx0/EdwNbRkr7QYI3dr0=)
2: Q8d7RzY2gTePrORmFB1UzIg5nPU.crl (hash: qMQPcm82alECuZcS5HYcv66Cg2wah57t4nVEzbc8Mdw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/01809b-42dd-4136-96b1-1fd10d8e075f/1/Q8d7RzY2gTePrORmFB1UzIg5nPU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/01809b-42dd-4136-96b1-1fd10d8e075f/1/Q8d7RzY2gTePrORmFB1UzIg5nPU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q8d7RzY2gTePrORmFB1UzIg5nPU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:6d:19:75:5e:34:f6:66:e9:8d:10:f3:bf:97:0a:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43c77b47363681378face466141d54cc88399cf5
Validity
Not Before: Jun 13 10:00:35 2026 GMT
Not After : Jun 14 10:00:35 2026 GMT
Subject: CN=eb8995918afb38f21fd20867bafd0d8259fc8202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6d:6d:54:6e:10:3c:b7:af:f0:44:fd:7e:f1:
6d:5c:ad:81:6f:9f:88:ea:a2:ab:99:b5:a6:af:c2:
f0:38:78:66:7d:e8:e6:a0:f7:da:01:ff:1d:11:6b:
d7:04:9a:88:00:d1:b9:ac:d8:bd:69:26:ec:2b:ce:
38:61:c8:98:72:3b:28:c7:61:75:8e:68:2f:d2:74:
23:6c:2e:2a:7a:88:8e:b7:3e:70:c0:f6:39:c2:bb:
53:a7:3c:3c:e4:57:1b:3d:f5:15:76:80:66:23:3f:
fe:2b:85:19:13:82:f4:24:02:83:a1:c9:50:df:f1:
42:9d:38:22:74:3c:cc:99:22:b8:4a:c2:9a:5b:d4:
21:bf:52:7c:42:d6:9a:60:43:29:d6:c0:2d:e9:f6:
cc:97:51:5d:76:b8:2b:18:c5:56:56:7c:7a:19:5c:
17:fb:0e:63:5d:e2:61:13:67:c0:02:bf:2c:03:61:
d6:6d:43:93:fe:84:bb:e5:70:a0:5e:d5:46:43:ea:
a5:c7:4a:62:58:10:ef:e5:ac:60:97:06:ba:9f:94:
b2:fa:6e:19:cd:4e:13:47:e4:e7:cd:43:ce:cd:ef:
e3:bf:6a:e1:f4:b1:93:2f:cb:94:65:c0:7b:6f:40:
bb:c5:f5:4c:e7:5d:1b:c6:60:02:a5:79:79:79:72:
52:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:89:95:91:8A:FB:38:F2:1F:D2:08:67:BA:FD:0D:82:59:FC:82:02
X509v3 Authority Key Identifier:
keyid:43:C7:7B:47:36:36:81:37:8F:AC:E4:66:14:1D:54:CC:88:39:9C:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q8d7RzY2gTePrORmFB1UzIg5nPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/01809b-42dd-4136-96b1-1fd10d8e075f/1/Q8d7RzY2gTePrORmFB1UzIg5nPU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/01809b-42dd-4136-96b1-1fd10d8e075f/1/Q8d7RzY2gTePrORmFB1UzIg5nPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:dd:84:6a:64:c6:1e:be:a9:9c:ce:7c:5f:ed:36:8f:4e:d6:
ef:0e:6b:9a:cb:ec:a2:70:44:89:b2:14:ce:2c:9b:36:4d:a2:
81:67:0a:f3:54:b9:6c:99:ff:4a:2c:df:ba:86:aa:a5:17:cd:
25:72:2c:88:8f:86:b2:1c:69:c7:c9:40:25:f6:87:b1:17:68:
1b:cb:f8:47:a1:c7:ed:1f:fc:26:d0:12:87:12:c8:4e:8c:b4:
54:7e:8a:53:87:c9:29:6a:62:d4:41:74:55:02:56:c7:88:42:
08:f1:36:46:3e:8e:ec:da:4c:b9:34:68:2b:e0:8c:fe:74:18:
92:27:89:39:1a:b2:46:8f:8d:08:ed:dd:3b:6e:eb:74:e0:d9:
af:af:01:4f:b2:6a:55:1d:65:b7:a0:1f:4a:9b:82:c0:e0:09:
7f:3f:2a:19:30:51:f3:52:4d:98:a7:20:76:4e:60:ce:d2:bf:
4a:aa:f6:45:cd:4a:bb:42:1c:b4:4a:94:6b:bb:d3:19:6f:e4:
d1:75:94:22:89:f5:2f:8a:8f:42:98:3b:a6:d8:8a:cf:64:a6:
54:5f:b0:65:6a:10:88:c7:47:52:1f:ed:9c:c4:34:9a:51:ae:
97:8e:a1:ff:86:64:3a:bf:7c:02:3b:65:5a:55:a7:76:2a:74:
e0:71:b2:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7AbRl1XjT2ZumNEPO/lwqoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzYzc3YjQ3MzYzNjgxMzc4ZmFjZTQ2NjE0MWQ1NGNjODgz
OTljZjUwHhcNMjYwNjEzMTAwMDM1WhcNMjYwNjE0MTAwMDM1WjAzMTEwLwYDVQQD
EyhlYjg5OTU5MThhZmIzOGYyMWZkMjA4NjdiYWZkMGQ4MjU5ZmM4MjAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoG1tVG4QPLev8ET9fvFtXK2Bb5+I
6qKrmbWmr8LwOHhmfejmoPfaAf8dEWvXBJqIANG5rNi9aSbsK844YciYcjsox2F1
jmgv0nQjbC4qeoiOtz5wwPY5wrtTpzw85FcbPfUVdoBmIz/+K4UZE4L0JAKDoclQ
3/FCnTgidDzMmSK4SsKaW9Qhv1J8QtaaYEMp1sAt6fbMl1FddrgrGMVWVnx6GVwX
+w5jXeJhE2fAAr8sA2HWbUOT/oS75XCgXtVGQ+qlx0piWBDv5axglwa6n5Sy+m4Z
zU4TR+TnzUPOze/jv2rh9LGTL8uUZcB7b0C7xfVM510bxmACpXl5eXJSaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOuJlZGK+zjyH9IIZ7r9DYJZ/IICMB8GA1UdIwQY
MBaAFEPHe0c2NoE3j6zkZhQdVMyIOZz1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUThkN1J6WTJnVGVQck9SbUZCMVV6SWc1blBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8wMTgwOWItNDJkZC00MTM2LTk2YjEt
MWZkMTBkOGUwNzVmLzEvUThkN1J6WTJnVGVQck9SbUZCMVV6SWc1blBVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS8wMTgwOWItNDJkZC00MTM2LTk2YjEtMWZkMTBkOGUwNzVm
LzEvUThkN1J6WTJnVGVQck9SbUZCMVV6SWc1blBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArt2EamTG
Hr6pnM58X+02j07W7w5rmsvsonBEibIUziybNk2igWcK81S5bJn/SizfuoaqpRfN
JXIsiI+Gshxpx8lAJfaHsRdoG8v4R6HH7R/8JtAShxLIToy0VH6KU4fJKWpi1EF0
VQJWx4hCCPE2Rj6O7NpMuTRoK+CM/nQYkieJORqyRo+NCO3dO27rdODZr68BT7Jq
VR1lt6AfSpuCwOAJfz8qGTBR81JNmKcgdk5gztK/Sqr2Rc1Ku0IctEqUa7vTGW/k
0XWUIon1L4qPQpg7ptiKz2SmVF+wZWoQiMdHUh/tnMQ0mlGul46h/4ZkOr98Ajtl
WlWndip04HGy9w==
-----END CERTIFICATE-----
Generated at Sat Jun 13 16:43:31 2026 by rpki-client